Privacy policy

Controller

The controller is ElectroMur Suministros SL, tax ID (CIF) B23879745, with its registered address at C/ del Pilar, 30, 30540 Estación de Blanca (Blanca, Murcia), Spain. For any privacy matter, write to us at electromursuministros@gmail.com or call 635 02 01 70. We have not designated a data protection officer.

What data we process

• Contact: your email address and your phone number.
• Delivery: the name of the person receiving the order, the address and the instructions for the courier.
• Invoicing: the tax identification document, which is mandatory (DNI, NIE, NIF or the tax number of your country), the name or company name, and the billing address if different from the delivery address.
• Orders: the parts, the amounts, the status of the order and the shipment, the invoices and, if any, withdrawals, returns and complaints.
• Payment: the result of the payment and its authorisation number. We never receive or store your card number: you enter it on the bank’s page.
• Access to “My orders”: the email address you sign in with, the one-time code we send you and the open session.
• Enquiries: if you write to us through the contact form, your name, your email address, your phone number and the part number or model if you provide them, and your message. The same applies if you email us directly.
• Security: the IP address, the browser and the page requested, which the server logs in order to serve the website, limit abuse and protect it.

Without the data marked as mandatory at checkout, we cannot process, ship or invoice the order. We only sell to adults.

Purposes and legal basis

• Processing your purchase: charging for it, preparing it, shipping it, emailing you about its status, giving you access to your orders and invoices, and handling cancellations, withdrawals, guarantee claims and complaints. Basis: performance of the contract (Art. 6(1)(b) GDPR).
• Invoicing and meeting tax obligations: issuing and keeping invoices, keeping the accounts and checking the tax identification document, including verifying the VAT number in VIES. Basis: legal obligation (Art. 6(1)(c)).
• Answering your enquiries from the contact form or by email, from our mailbox. Basis: the pre-contractual steps you ask us to take, such as finding out whether we have a part (Art. 6(1)(b)), or our legitimate interest in responding to those who write to us (Art. 6(1)(f)).
• Protecting the shop: preventing unauthorised access, fraud and abuse, and resolving technical incidents. Basis: legitimate interest (Art. 6(1)(f)).

We do not send you advertising or newsletters. The emails you receive relate to your order (access codes, confirmation, invoice and status updates) and our replies to your questions. The contact form does not send you any automatic copy. We do not carry out profiling or take automated decisions with legal effects.

Who else processes it

Only the providers that render a service to us, as processors and under contract, and the bodies to which the law requires us to disclose it:

• Banco Sabadell and Redsys, to take card payments and make refunds.
• Holded, to issue the invoices.
• GLS, which receives the delivery name, address and phone number.
• Resend, our email provider, to send you the codes, the confirmation and the invoice, and to deliver to us the messages from the contact form.
• Google (Gmail), where our mailbox is hosted: that is where we receive your enquiries and reply to you.
• The European Commission (VIES), if you provide an intra-Community VAT number: we look it up in its system, which checks it with the tax authority of your country.
• Cloudflare, which protects the website and stores the PDF invoices, and the hosting provider of the server and of the backups.
• The Spanish Tax Agency (Agencia Tributaria) and other public authorities, where required by law.

Some of these providers may process data outside the European Economic Area. They do so with the safeguards of the GDPR, such as the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses. We do not sell your data or share it for advertising.

How long we keep it

• Orders, invoices and accounts: six years from the end of the financial year, as required by the Código de Comercio (Spanish Commercial Code, Art. 30), plus any additional period set by tax legislation.
• Customer record (email address and details of your orders): for as long as there are orders we must keep.
• Access to “My orders”: the code expires within minutes, and the session after 24 hours or when you click “Sign out”.
• Enquiries: while we deal with them and, afterwards, for the period in which a claim about them may arise. If they lead to an order, they are kept with it.
• Security logs: for the time needed to protect the shop and deal with incidents.

Once those periods have expired, we erase or anonymise the data. While a statutory period is running, we keep it blocked.

Your rights

You can request access to, rectification, erasure, restriction of processing and portability of your data, and object to its processing, by writing to electromursuministros@gmail.com from the email address you bought with or with a document proving your identity. We reply within one month at the latest.

If you are not satisfied with the reply, you can lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) through its electronic office or by post.

The cookies the shop uses are described in the cookie policy.